This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json) Hash identifier: x4T7YRNPlxKSQnFcfMVvuYFk/ou4WwNTEtFlnSDmI/4= Subject key identifier: 5E:7C:E4:B0:88:DD:03:11:94:5A:B8:1B:44:7A:E9:04:6B:26:97:21 Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Certificate serial: 019B38D893BC84D891913520A8B3421663A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft Manifest number: 149F Signing time: Fri 19 Dec 2025 23:01:16 +0000 Manifest this update: Fri 19 Dec 2025 23:01:16 +0000 Manifest next update: Sat 20 Dec 2025 23:01:16 +0000 Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=) 2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: 31x1zitEUud775gH8+PVz+SlLQVc8xvA04QuUsOkm9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:93:bc:84:d8:91:91:35:20:a8:b3:42:16:63:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Validity Not Before: Dec 19 23:01:16 2025 GMT Not After : Dec 20 23:01:16 2025 GMT Subject: CN=5e7ce4b088dd0311945ab81b447ae9046b269721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:bb:65:e0:4e:de:50:8d:fb:80:69:c3:e4: 35:37:f7:0f:9b:a4:7d:f9:15:97:a2:45:d8:cc:30: 0c:0b:01:97:88:21:af:eb:e4:4c:10:23:48:c2:fe: 25:88:18:ba:af:83:76:52:ca:de:a1:57:32:e0:cd: e0:f8:b7:cd:89:f9:eb:75:45:64:bb:a3:84:a4:88: c0:fc:c2:61:8f:13:02:25:86:ad:66:ee:36:7b:7d: 6b:38:a2:bb:58:70:e6:d6:9a:a0:c4:0e:54:28:63: 15:86:ea:37:ad:50:17:36:36:46:1c:1c:f2:7b:30: 34:00:96:e6:67:38:4a:a4:d3:9f:19:ce:ce:b1:96: 16:6b:33:02:bc:91:d7:96:3c:f5:bb:45:e8:72:00: 73:16:27:8a:63:d5:59:7b:8d:1f:1a:68:5e:7c:cb: e4:95:37:b2:f4:69:c9:78:41:27:16:59:42:a0:6a: c0:12:0d:9e:83:5b:5d:b5:f0:61:73:5b:b2:7b:a9: 37:a6:a7:0c:96:0e:ff:e1:f2:5d:12:9a:70:43:36: e5:e8:e3:d8:ea:f5:97:8b:05:63:4b:be:18:29:7b: 42:84:98:00:79:41:c2:27:5d:05:c0:02:8e:eb:64: ff:bd:ff:5f:d6:b3:e9:76:74:c5:fa:82:45:f1:fd: 8f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7C:E4:B0:88:DD:03:11:94:5A:B8:1B:44:7A:E9:04:6B:26:97:21 X509v3 Authority Key Identifier: keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:cc:4a:bf:bc:8e:0f:91:10:52:f4:65:74:f6:e9:0c:ee:85: fc:34:66:81:de:24:b1:67:9b:e6:b8:b5:5a:4d:a9:5a:4b:8f: 74:d4:7d:5d:56:7b:5e:0e:55:8d:67:fa:23:6b:23:25:96:9b: 9c:8c:77:cd:2f:80:39:d0:4e:a4:50:57:e8:74:44:1e:4f:f4: 3d:c1:c4:56:e1:db:da:ad:a6:af:0f:3d:80:04:72:48:5b:bd: db:58:74:b8:34:d1:4e:4a:d8:9b:6f:e7:ad:69:66:47:e6:87: e6:aa:99:a8:53:33:4b:ef:36:d1:5d:6d:fd:a4:a6:f3:41:03: 6a:a1:82:cb:62:e0:b1:a8:a1:0e:dd:bf:67:02:01:c5:58:26: 50:7a:73:fa:f6:b2:fd:9d:48:23:31:f5:b4:c8:48:42:01:62: 6f:18:dd:34:58:34:27:f6:d0:79:7c:28:db:76:ea:20:b9:52: fc:dc:73:1f:26:eb:1c:a3:aa:88:4f:a7:6f:5f:3a:e2:98:b2: 92:1f:f4:a3:9f:d4:fd:e3:24:8b:62:86:8e:b4:5d:eb:1d:ad: f8:d0:71:e1:23:ec:23:1b:b7:e5:18:85:60:7e:e1:22:f2:43: 8f:2f:09:ad:ff:dd:01:fe:61:67:eb:e0:c1:f4:35:df:c4:8c: 2d:e4:d9:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42JO8hNiRkTUgqLNCFmOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx YzY5N2YwHhcNMjUxMjE5MjMwMTE2WhcNMjUxMjIwMjMwMTE2WjAzMTEwLwYDVQQD Eyg1ZTdjZTRiMDg4ZGQwMzExOTQ1YWI4MWI0NDdhZTkwNDZiMjY5NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09+7ZeBO3lCN+4Bpw+Q1N/cPm6R9 +RWXokXYzDAMCwGXiCGv6+RMECNIwv4liBi6r4N2UsreoVcy4M3g+LfNifnrdUVk u6OEpIjA/MJhjxMCJYatZu42e31rOKK7WHDm1pqgxA5UKGMVhuo3rVAXNjZGHBzy ezA0AJbmZzhKpNOfGc7OsZYWazMCvJHXljz1u0XocgBzFieKY9VZe40fGmhefMvk lTey9GnJeEEnFllCoGrAEg2eg1tdtfBhc1uye6k3pqcMlg7/4fJdEppwQzbl6OPY 6vWXiwVjS74YKXtChJgAeUHCJ10FwAKO62T/vf9f1rPpdnTF+oJF8f2PPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF585LCI3QMRlFq4G0R66QRrJpchMB8GA1UdIwQY MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMxKv7yO D5EQUvRldPbpDO6F/DRmgd4ksWeb5ri1Wk2pWkuPdNR9XVZ7Xg5VjWf6I2sjJZab nIx3zS+AOdBOpFBX6HREHk/0PcHEVuHb2q2mrw89gARySFu921h0uDTRTkrYm2/n rWlmR+aH5qqZqFMzS+820V1t/aSm80EDaqGCy2LgsaihDt2/ZwIBxVgmUHpz+vay /Z1IIzH1tMhIQgFibxjdNFg0J/bQeXwo23bqILlS/NxzHybrHKOqiE+nb1864piy kh/0o5/U/eMki2KGjrRd6x2t+NBx4SPsIxu35RiFYH7hIvJDjy8Jrf/dAf5hZ+vg wfQ138SMLeTZjA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:49 2025 by rpki-client